CVE catalog

CVE-2025-1176

GNU binutils vulnerabilities

[CVE catalog]

Severity
Medium · CVSS 5CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.68% · Oct 25, 2026

A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_mark_rsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The patch is named f9978defb6fab0bd8583942d97c112b0932ac814. It is recommended to apply a patch to fix this issue.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianbinutilssid2.47.50.20261021-1fixed
Debianbinutilsforky2.47.50.20261021-1fixed
Debianbinutilstrixie2.44-3vulnerable
Debianbinutilsbookworm2.40-2vulnerable
UbuntubinutilsnobleNot reportedvulnerable
Ubuntubinutilsnoble2.42-4ubuntu2.5fixed
Ubuntubinutils-aarch64-linux-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-alpha-linux-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-arc-linux-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-arm-linux-gnueabinoble2.42-4ubuntu2.5fixed
Ubuntubinutils-arm-linux-gnueabihfnoble2.42-4ubuntu2.5fixed
Ubuntubinutils-commonnoble2.42-4ubuntu2.5fixed
Ubuntubinutils-devnoble2.42-4ubuntu2.5fixed
Ubuntubinutils-docnoble2.42-4ubuntu2.5fixed
Ubuntubinutils-for-buildnoble2.42-4ubuntu2.5fixed
Ubuntubinutils-for-hostnoble2.42-4ubuntu2.5fixed
Ubuntubinutils-hppa-linux-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-hppa64-linux-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-i686-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-i686-kfreebsd-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-i686-linux-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-ia64-linux-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-loongarch64-linux-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-m68k-linux-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-multiarchnoble2.42-4ubuntu2.5fixed
Ubuntubinutils-multiarch-devnoble2.42-4ubuntu2.5fixed
Ubuntubinutils-powerpc-linux-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-powerpc64-linux-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-powerpc64le-linux-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-riscv64-linux-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-s390x-linux-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-sh4-linux-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-sourcenoble2.42-4ubuntu2.5fixed
Ubuntubinutils-sparc64-linux-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-x86-64-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-x86-64-kfreebsd-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-x86-64-linux-gnunoble2.42-4ubuntu2.5fixed
Ubuntubinutils-x86-64-linux-gnux32noble2.42-4ubuntu2.5fixed
Ubuntulibbinutilsnoble2.42-4ubuntu2.5fixed
Ubuntulibctf-nobfd0noble2.42-4ubuntu2.5fixed
Ubuntulibctf0noble2.42-4ubuntu2.5fixed
Ubuntulibgprofng0noble2.42-4ubuntu2.5fixed
Ubuntulibsframe1noble2.42-4ubuntu2.5fixed
Ubuntubinutilspro2.29.1-4ubuntu1vulnerable
Ubuntubinutilspro2.29.1-6ubuntu1vulnerable
Ubuntubinutilspro2.29.1-7ubuntu1vulnerable
Ubuntubinutilspro2.29.1-8ubuntu1vulnerable
Ubuntubinutilspro2.29.1-10ubuntu1vulnerable
Ubuntubinutilspro2.29.1-12ubuntu1vulnerable
Ubuntubinutilspro2.30-4ubuntu1vulnerable
Ubuntubinutilspro2.30-5ubuntu1vulnerable
Ubuntubinutilspro2.30-7ubuntu1vulnerable
Ubuntubinutilspro2.30-8ubuntu1vulnerable
Ubuntubinutilspro2.30-9ubuntu1vulnerable
Ubuntubinutilspro2.30-10ubuntu1vulnerable
Ubuntubinutilspro2.30-11ubuntu1vulnerable
Ubuntubinutilspro2.30-14ubuntu2vulnerable
Ubuntubinutilspro2.30-15ubuntu1vulnerable
Ubuntubinutilspro2.30-20ubuntu2~18.04vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.1vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.2vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.3vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.4vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.5vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.7vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.8vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.9vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.9+esm1vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.9+esm3vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.9+esm4fixed
Ubuntubinutils20.042.33-2ubuntu1vulnerable
Ubuntubinutils20.042.33.1-1ubuntu1vulnerable
Ubuntubinutils20.042.33.1-5ubuntu1vulnerable
Ubuntubinutils20.042.33.1-6ubuntu1vulnerable
Ubuntubinutils20.042.33.1-6ubuntu3vulnerable
Ubuntubinutils20.042.33.90.20200122-1ubuntu2vulnerable
Ubuntubinutils20.042.34-1ubuntu1vulnerable
Ubuntubinutils20.042.34-3ubuntu1vulnerable
Ubuntubinutils20.042.34-4ubuntu1vulnerable
Ubuntubinutils20.042.34-5ubuntu1vulnerable
Ubuntubinutils20.042.34-6ubuntu1vulnerable
Ubuntubinutils20.042.34-6ubuntu1.1vulnerable
Ubuntubinutils20.042.34-6ubuntu1.3vulnerable
Ubuntubinutils20.042.34-6ubuntu1.4vulnerable
Ubuntubinutils20.042.34-6ubuntu1.5vulnerable
Ubuntubinutils20.042.34-6ubuntu1.6vulnerable
Ubuntubinutils20.042.34-6ubuntu1.7vulnerable
Ubuntubinutils20.042.34-6ubuntu1.8vulnerable
Ubuntubinutils20.042.34-6ubuntu1.9vulnerable
Ubuntubinutils20.042.34-6ubuntu1.10vulnerable
Ubuntubinutils20.042.34-6ubuntu1.11fixed
Ubuntubinutils22.042.37-7ubuntu1vulnerable
Ubuntubinutils22.042.37-9ubuntu1vulnerable
Ubuntubinutils22.042.37-10ubuntu1vulnerable
Ubuntubinutils22.042.37.50.20220106-2ubuntu1vulnerable
Ubuntubinutils22.042.37.90.20220126-0ubuntu1vulnerable
Ubuntubinutils22.042.37.90.20220130-0ubuntu2vulnerable
Ubuntubinutils22.042.38-1ubuntu1vulnerable
Ubuntubinutils22.042.38-2ubuntu1vulnerable
Ubuntubinutils22.042.38-3ubuntu1vulnerable
Ubuntubinutils22.042.38-4ubuntu2vulnerable
Ubuntubinutils22.042.38-4ubuntu2.1vulnerable
Ubuntubinutils22.042.38-4ubuntu2.2vulnerable
Ubuntubinutils22.042.38-4ubuntu2.3vulnerable
Ubuntubinutils22.042.38-4ubuntu2.4vulnerable
Ubuntubinutils22.042.38-4ubuntu2.5vulnerable
Ubuntubinutils22.042.38-4ubuntu2.6vulnerable
Ubuntubinutils22.042.38-4ubuntu2.7vulnerable
Ubuntubinutils22.042.38-4ubuntu2.8fixed
Ubuntubinutils24.042.41-5ubuntu1vulnerable
Ubuntubinutils24.042.41-6ubuntu1vulnerable
Ubuntubinutils24.042.41.50.20231206-1ubuntu1vulnerable
Ubuntubinutils24.042.41.50.20231214-1ubuntu1vulnerable
Ubuntubinutils24.042.41.50.20231227-1ubuntu1vulnerable
Ubuntubinutils24.042.41.90.20240122-1ubuntu1vulnerable
Ubuntubinutils24.042.42-2ubuntu1vulnerable
Ubuntubinutils24.042.42-3ubuntu1vulnerable
Ubuntubinutils24.042.42-4ubuntu1vulnerable
Ubuntubinutils24.042.42-4ubuntu2vulnerable
Ubuntubinutils24.042.42-4ubuntu2.3vulnerable
Ubuntubinutils24.042.42-4ubuntu2.4vulnerable
Ubuntubinutils24.042.42-4ubuntu2.5fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianbinutilssourcesid2.45-3unimportantNot reported[1108986]
Debianbinutilssourceforky2.45-3unimportantNot reported[1108986]
Debianbinutilssourcetrixie(unfixed)unimportantNot reported[1108986]
Debianbinutilssourcebookworm(unfixed)unimportantNot reported[1108986]
Ubuntubinutilsdebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-aarch64-linux-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-alpha-linux-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-arc-linux-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-arm-linux-gnueabidebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-arm-linux-gnueabihfdebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-commondebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-devdebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-docdebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-for-builddebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-for-hostdebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-hppa-linux-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-hppa64-linux-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-i686-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-i686-kfreebsd-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-i686-linux-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-ia64-linux-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-loongarch64-linux-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-m68k-linux-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-multiarchdebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-multiarch-devdebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-powerpc-linux-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-powerpc64-linux-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-powerpc64le-linux-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-riscv64-linux-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-s390x-linux-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-sh4-linux-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-sourcedebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-sparc64-linux-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-x86-64-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-x86-64-kfreebsd-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-x86-64-linux-gnudebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutils-x86-64-linux-gnux32debnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntulibbinutilsdebnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntulibctf-nobfd0debnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntulibctf0debnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntulibgprofng0debnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntulibsframe1debnoble2.42-4ubuntu2.5Not reportedNot reportedNot reported
Ubuntubinutilsdebpro2.30-21ubuntu1~18.04.9+esm4Not reportedUBUNTU-CVE-2025-1176Not reported
Ubuntubinutilsdeb20.042.34-6ubuntu1.11Not reportedUBUNTU-CVE-2025-1176Not reported
Ubuntubinutilsdeb22.042.38-4ubuntu2.8Not reportedUBUNTU-CVE-2025-1176Not reported
Ubuntubinutilsdeb24.042.42-4ubuntu2.5Not reportedUBUNTU-CVE-2025-1176Not reported

[Debian bug #1108986]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [binutils]Affected
    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • [binutils-common]Affected

    Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • [binutils-dev]Affected

    Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • [binutils-doc]Affected

    Source package: [binutils]

    Details (2)
    • 2.40-2 · all · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · all · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · all · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · all · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (2)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

  • Source package: [binutils]

    Details (1)
    • 2.40-2 · amd64 · bookworm

      Affected

      usn · binutils · debian · bookworm; usn · binutils · debian · 12

Next results

Observed:

References